iis also requires a connection be allowed to inetinfo (beginning on port 1282) to preform the action you requested. if you fw's only allowing 20 & 21 its not gonna happen.